Adding rules is slow through the API

[Roy_Kooijman]

Hi,

I'm using the R80.10 management API to add firewall rules with the mgmt_cli tool. First I login, obtain the sessionid and then create firewall rules using the "add access-rule" command. Finally, the changes are published. For a couple of rules this works fine, but 200 rules takes 16 minutes. I add the rules using position "bottom", I would expect this to be nearly instant. I only publish at the end.

The mgmt is R80.10 running on a VM, but on a 3150 it isn't any faster.

Any tips to speed this up?

Cheers, Robbert

[Robert_Decker · Accepted solution]

One thing that I can offer you is to inverse the order - add rules from the bottom-most one and go up. Running the API in this way runs faster than adding rules top-to-bottom especially when dealing with adding many rules in the same session.

We are working on improving the performance of adding rules in the "to the bottom" situation.

Robert.

[Roy_Kooijman]

I can confirm that for large rulebases, positioning on top is signficantly faster than on the bottom. Thanks for the answer.

Robbert